
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109314073968902163/0/3131392e38302e3234342e302f32322d3232203d3e2030.roa
File: 3131392e38302e3234342e302f32322d3232203d3e2030.roa (raw, json)
Hash identifier: sFGUE7NTrHONeVZj/rYlxwtvbN7ZJ7FhgLs1FLPx0Vo=
Subject key identifier: 15:70:3F:03:C1:56:EB:EC:DB:53:8B:FC:31:5D:60:A7:AA:92:57:CA
Certificate issuer: /CN=C899967B95E32E37CCEAA11CF146FB57B51A7C49
Certificate serial: 12EC116C75238D40B6515314EF72C3DC5A5C17BF
Authority key identifier: C8:99:96:7B:95:E3:2E:37:CC:EA:A1:1C:F1:46:FB:57:B5:1A:7C:49
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/3131392e38302e3234342e302f32322d3232203d3e2030.roa
Signing time: Mon 25 May 2026 23:58:16 +0000
ROA not before: Mon 25 May 2026 23:53:16 +0000
ROA not after: Mon 24 May 2027 23:58:16 +0000
asID: 0
IP address blocks: 119.80.244.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.crl
rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:ec:11:6c:75:23:8d:40:b6:51:53:14:ef:72:c3:dc:5a:5c:17:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C899967B95E32E37CCEAA11CF146FB57B51A7C49
Validity
Not Before: May 25 23:53:16 2026 GMT
Not After : May 24 23:58:16 2027 GMT
Subject: CN=15703F03C156EBECDB538BFC315D60A7AA9257CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:6c:1d:8c:42:24:43:01:db:ff:e8:c9:58:7d:
41:49:de:66:c0:63:16:fc:8b:f2:56:e5:65:62:b6:
4d:26:d1:bf:eb:12:f8:9c:4e:a6:aa:b5:a0:00:de:
98:cd:bd:9c:0c:39:0b:ea:38:ea:b2:0b:ed:41:87:
0f:1f:c2:bf:5f:0c:2d:90:df:eb:03:9e:a1:87:f1:
48:15:da:e9:1a:85:ca:1a:de:92:43:6a:69:91:f8:
24:de:07:73:d0:01:5b:8b:b6:d6:94:c2:f9:6e:c6:
c8:8b:a9:a2:80:f4:69:55:09:12:8c:0e:e2:b8:ad:
9a:2d:44:3f:48:29:63:09:fc:8e:0b:ab:a3:53:12:
79:5d:02:04:e2:17:31:3b:9b:64:e4:71:f1:6a:1b:
3c:ce:68:09:c4:c9:15:c3:09:e7:88:6c:2b:14:16:
36:f9:1c:66:50:dc:5a:f6:58:b0:a3:d4:69:69:1e:
27:55:bf:87:31:4c:60:eb:c4:a8:c3:fe:f1:42:74:
64:cd:06:35:6c:cb:7b:5e:5a:57:79:dd:c7:b8:bb:
ed:fb:66:bd:a7:ff:96:8d:ea:d2:5b:cd:6f:e5:28:
fa:ba:05:57:36:fd:0c:c8:2f:8d:e2:18:a9:df:24:
7b:da:80:d7:ce:9e:8e:4b:10:b8:f9:c3:9d:a0:ed:
58:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:70:3F:03:C1:56:EB:EC:DB:53:8B:FC:31:5D:60:A7:AA:92:57:CA
X509v3 Authority Key Identifier:
keyid:C8:99:96:7B:95:E3:2E:37:CC:EA:A1:1C:F1:46:FB:57:B5:1A:7C:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/3131392e38302e3234342e302f32322d3232203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.80.244.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:a2:03:2c:b7:a5:17:11:2b:74:5f:5c:f9:d7:06:26:80:42:
b3:33:91:a7:1b:ff:ad:7a:f1:3d:ab:fd:65:79:c1:9e:4d:98:
ee:ba:fb:de:3f:e4:ba:92:42:40:88:01:6c:d0:97:8f:42:e9:
b9:90:f9:e4:1d:ec:c5:8d:f2:9c:e6:20:12:d4:4b:ce:54:2e:
05:b5:bc:e6:6a:21:4f:8e:d5:9e:72:42:ff:10:14:95:44:57:
56:17:cf:bc:7d:60:ff:6f:fd:4c:6a:13:e8:d8:3f:a9:40:ed:
d2:ab:3e:58:48:bd:a0:c4:6a:28:4e:db:80:a2:50:f6:6f:4d:
fa:2b:61:5e:28:4f:95:b9:02:d7:df:06:ad:8a:6c:4e:7c:f1:
ad:bf:5c:1c:7b:a9:33:af:6b:38:dc:4c:ca:4e:90:14:8f:fc:
53:ea:9d:e3:fc:42:66:eb:33:cb:7e:4e:e5:13:d3:f0:be:db:
d6:0d:a3:bd:2a:0c:44:36:fe:33:d6:6d:13:e3:50:f8:77:73:
11:d4:83:d8:b2:b2:71:f4:b5:40:79:b7:68:6c:18:22:24:8d:
87:96:5f:3e:88:39:36:e3:07:7a:66:f9:b6:bd:30:4e:ec:ff:
64:6d:dc:10:f0:d2:c8:07:45:4f:e7:c8:a6:2d:3a:b4:45:de:
8a:cd:e5:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:50:01 2026 by rpki-client